Consent to the Collection and Use of Personal Information

1. Consent to the Collection and Use of Personal Information

This application [Free Fighter] has established procedures for obtaining consent regarding the collection and use of personal information during user registration or service usage. By selecting \[Agree], the user is considered to have consented to the collection and use of their personal information as outlined in the Terms of Service and Privacy Policy.

---

2. Items and Methods of Personal Information Collection

This application [Free Fighter] collects the following personal information when users register as members, make customer inquiries, or use various services.

(1) Basic Information Collected

1. Device information (model name, operating system version, hardware details, unique identifiers, device platform, etc.), game service usage and access logs, payment history, game version, and telecom provider information.

2. Depending on the platform type used to access the game, additional personal information may be collected.

Facebook Integration: Required – Facebook ID; Optional – Mobile phone number
Google Integration: Required – Google ID; Optional – Mobile phone number
Customer Support Services: Mobile phone number, name, email address, SMS consent
Payment Inquiries: Marketplace ID, payment history, payment device information, player name, email address
Events and Promotions: Name, address, postal code, mobile or phone number, email address
Identity Verification: Full name, identity document

Users may choose whether to provide the optional personal information listed above. However, some services may be partially or fully restricted based on whether such optional information is provided.

(2) Methods of Collecting Personal Information

The application [Free Fighter] collects personal information through the following methods:

1. Through the consent process during service registration
2. Through separate consent processes during promotions and events
3. Automatically through platforms that provide services in partnership with the company
4. Voluntarily provided by the user or collected as needed during service requests, payments, or customer support interactions

---

3. Purposes of Collecting and Using Personal Information

(1) The application [Free Fighter] uses collected user information for the following purposes:

1. To ensure smooth communication channels such as sending notifications and handling complaints
2. To provide customer services, including handling inquiries related to paid content usage, dispute resolution regarding service contracts, and refunds
3. To provide information on new services, products, promotions, and events
4. To provide other content and authentication services (e.g., ID/PW recovery)

---

4. Sharing and Provision of Personal Information

1. The application [Free Fighter] will not use users’ personal information beyond the scope of the purposes disclosed in “Purpose of Collecting and Using Personal Information,” nor will it provide personal information to any other companies, organizations, or institutions without user consent, unless required by applicable laws and regulations.

2. If it becomes necessary to share user information with business partners or operators for the provision of services within a limited scope, the company will notify users at least 10 days prior to the effective date via in-game announcements, SMS, or other means. This notice will include the recipients, purpose of sharing, items of personal information involved, and obtain user consent in advance.

3. Personal information may be provided without the user's consent in the following cases, as permitted by relevant laws and regulations:

When required for billing purposes related to service provision
When used for statistical analysis, academic research, or market research and the information is processed in a way that individuals cannot be identified
When requested by relevant authorities in accordance with the law for investigation
When required by special provisions under laws such as the Act on Real Name Financial Transactions and Confidentiality, the Act on the Use and Protection of Credit Information, the Telecommunications Business Act, the Framework Act on Telecommunications, the Local Tax Act, the Consumer Protection Act, the Bank of Korea Act, the Criminal Procedure Act, etc.

---

5. Delegation of Personal Information Processing

The application [Free Fighter] may delegate the processing of personal information for service provision purposes. When doing so, the company includes necessary clauses in the delegation contract to ensure secure management in compliance with applicable laws.

The delegated parties and their purposes are as follows:

Recipient Delegated Tasks and Purpose Retention and Use Period
Event winners notification | Until membership withdrawal or termination of delegation contract |
---

6. Retention and Use Period of Personal Information

1. The company retains users’personal information during the use of its services. Personal information collected with the user's consent may be retained and used as long as the user maintains membership status. Upon account deletion, the personal information will be permanently erased and no longer accessed or used. However, to allow for recovery in case of identity theft or similar incidents, the company may retain user information for 30 days after withdrawal, after which it will be deleted completely.

Additionally, exceptions apply when retention is based on the user’s consent or required by relevant laws such as the Commercial Act or the Act on Consumer Protection in Electronic Commerce.

2. Even after the purpose of collection or provision has been fulfilled, the company may retain information if required by law or its internal policy. In such cases, the information will only be used for the purpose of retention and not for any other purpose.

Examples:

If a user has caused damage through misuse, the company may retain their information for one year for legal investigation or protection of other users.
In accordance with legal requirements, information may be retained beyond its original use purpose.

Retention periods according to legal obligations:

Contract or order cancellation records: 5 years (Consumer Protection in Electronic Commerce Act)
Payment and supply records: 5 years
Customer complaint and dispute records: 5 years
Identity verification records: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection)
Access records (access logs, service usage logs): 3 months (Protection of Communications Secrets Act)

3. If a user requests to view personal information retained under section 6(2), the company will take necessary measures to allow access and immediate verification.

How to delete an account:
1. Log in and navigate to “My Info” page.
2. Click “Delete Account” in the top right corner.
3. Confirm deletion: Click “Delete Account” → Enter “Delete” → Confirm.
4. The account will remain active for 14 days, during which you can cancel deletion. After 14 days, the account will be permanently deleted.

---

7. Procedures and Methods for Destroying Personal Information

In principle, the company shall promptly destroy personal information once the purpose of its collection and use has been achieved. The procedures and methods are as follows:

(1) Destruction Procedures

Information entered by users during membership registration, etc., is retained for a certain period and then destroyed in accordance with internal policy and applicable legal obligations (refer to Section 6 on retention and use period).
Unless otherwise required by law, personal information will not be used for any purposes beyond those for which it was originally retained.

(2) Destruction Methods

Personal information stored in electronic form will be deleted using non-recoverable technical methods.
Printed personal information will be destroyed by shredding or incineration.

---

8. User and Legal Representative Rights and How to Exercise Them

(1) Users may exercise their rights through the platform or directly on the company's official website.
(2) Users and their legal guardians may view or edit personal information or request to cancel membership at any time.
(3) To view or modify personal information, click on “Edit Profile” (or similar options); to withdraw membership (revoke consent), go through the identity verification process on the website. You may also contact the person in charge of personal data by phone, email, or in writing, and we will respond promptly.
(4) If correction of erroneous personal information is requested, the company will not use or provide such information until the correction is completed. If the incorrect data was shared with third parties, they will be notified immediately.
(5) Any personal information requested to be deleted by the user or guardian will be handled according to Section 6 and will no longer be accessible or used for other purposes.

---

9. Cookies and Automatic Data Collection

The company uses cookies to store and retrieve member information for personalized services. Cookies are small text files sent by the server to a user’s device and stored locally. When the user accesses the service, the server reads the cookie to provide customized services.

Users can manage their cookie preferences through their device settings. However, disabling cookies may affect the use of login-required features.

---

10. Technical and Administrative Safeguards for Personal Information

To prevent loss, theft, leakage, alteration, or damage of personal information, the company implements reasonable technical and administrative measures:

(1) Password Encryption
Passwords entered for account registration are encrypted and stored on secure servers. The company does not collect passwords associated with third-party platforms.

(2) Protection Against Hacking
To prevent external threats and hacking, intrusion prevention systems are installed and maintained. Backup systems are also in place.

(3) Staff Access Control and Training
Access to personal data is restricted to a minimum number of staff. Ongoing training is provided to ensure compliance with the privacy policy.

(4) Internal Oversight
A dedicated privacy protection team regularly monitors compliance and takes corrective action when necessary.

Note: The company is not liable for personal data leaks resulting from user negligence (e.g., lost device or weak passwords).

Mobile Safety Advice:
Since this service is accessed via mobile devices, users are advised to set screen locks or other security features to prevent data leakage. The company bears no responsibility for damages caused by the user’s carelessness.

---

11. Personal Information Infringement Complaint Service

To protect user information and address complaints:

Department: Operations Team
Support Hours:Mon–Fri, 10:00–12:00 / 14:00–18:00 (Closed on weekends and holidays)
Email: [aqabawallpaper@gmail.com](mailto:aqabawallpaper@gmail.com)

Data Protection Officer

Name: Yixiang Feng
Position: Operations Manager

Data Management Manager
Name: Yixiang Feng
Department:Operations Team
Position: Team Lead

---

Additional Notes

1. The company may provide links to external websites or materials. The company is not responsible for the content or privacy practices of external sites.
2. Clicking such links will redirect you to third-party sites. Please review their respective policies.
3. Users must keep their information accurate and updated. The company is not responsible for damages due to inaccurate or false information (e.g., identity theft).
4. Users must also protect their own data and not infringe on others’ rights. Any violations may be subject to legal consequences.
5. Users are solely responsible for any disadvantages or losses caused by incorrect input of personal data.

---

12. Notification Obligations

If changes are made to this policy due to legal, policy, or technical reasons, the company will notify users at least 10 days in advance through the “Notices” section.